app.plan_overrides
TableRow level security on
An operator's time-boxed change to an org's plan (A90, Section 16): the whole plan, one plan feature on or off, or one countable limit. Written only by the console RPCs with a reason and an expiry of at most a year; ended early at most once. Live overrides drive private.org_plan_limits and private.org_has_feature; billing keeps the subscription's plan.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| override_kind | app.plan_override_kind | No | Plan, Feature or Limit. |
| plan_code | text | Yes | Plan the org is held to while a Plan override lasts.References app.plans.code |
| feature_code | app.plan_feature_code | Yes | Plan feature a Feature override turns on or off. |
| feature_enabled | boolean | Yes | Whether a Feature override turns the feature on (true) or off (false). |
| limit_code | app.plan_limit_code | Yes | Countable limit a Limit override sets. |
| limit_value | bigint | Yes | Limit in force while a Limit override lasts; null is unlimited. |
| reason | text | No | Why the platform team made the override. |
| starts_at | timestamp with time zone | No | When the override began. |
| expires_at | timestamp with time zone | No | When the override stops applying, at most a year after it began. |
| ended_at | timestamp with time zone | Yes | When an operator ended the override early, or a newer override replaced it. |
| ended_by | uuid | Yes | Operator who ended it early.References app.people.id |
| end_reason | text | Yes | Why it ended early. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |